Just one month after releasing vCenter Update1e VMware released the Update 1f for vCenter Server.

The Update patches the vCSA operating system (Photon OS) against Spectre-1 (CVE-2017-5753) and Meltdown (CVE-2017-5754).
A patch for the Spectre-2-vulnerability (CVE-2017-5715) is still not availiable.

After initialization the vCenter Server appliance is back online and ready for work

If you have select that root password doesn’t expire you have to set this again. Every update activates the expiration of root.UPDATE: With vCenter Server Update 1d / Update 1e / Update 1f the root expiration was still disabled after the update.
Maybe VMware now check the setting and keeps it. But I would recommend to check it after every update